Towards Federated Learning at Scale: System Design
Keith BonawitzHubert EichnerWolfgang GrieskampDzmitry HubaAlex IngermanVladimir IvanovChloe KiddonJakub KonečnýStefano MazzocchiH. Brendan McMahan
Presents the production system architecture and communication protocol required to scale federated learning across millions of decentralized mobile devices while resolving real-world challenges in device availability and network efficiency.
Federated learning enables model training across decentralized data on mobile devices without moving raw user data to central servers, addressing rising privacy concerns and regulatory pressures around personal information. The work describes the design and deployment of a production system built on TensorFlow for Android phones, focused on synchronous rounds of training and evaluation using algorithms such as Federated Averaging.
The authors set out to create a scalable infrastructure that orchestrates device participation, aggregates model updates securely, and supports real-world applications while respecting device constraints and user experience. They implemented a protocol with selection, configuration, and reporting phases, an on-device runtime that runs only when devices are idle and charging, an actor-based server architecture for elastic scaling, and optional Secure Aggregation to keep individual updates encrypted.
The system has operated in production for over a year with a cumulative population of roughly 10 million daily active devices across multiple applications. A few hundred participating devices per round proved sufficient for convergence in most cases, while observed dropout rates ranged from 6 to 10 percent; pace steering balanced load across diurnal cycles and population sizes. In one keyboard application, a recurrent model trained over five days on 1.5 million users improved top-1 recall from 13.0 percent to 16.4 percent, matching or exceeding a centrally trained counterpart. Device health metrics and round visualizations allowed rapid detection and resolution of operational issues.
These results show that synchronous federated training can be made reliable at scale, delivering models that use on-device data while limiting exposure of raw examples and supporting additional privacy tools such as differential privacy. The approach reduces the need to transmit sensitive user interactions and enables applications such as next-word prediction and content suggestion that would otherwise raise privacy or bandwidth barriers.
Further work should quantify participation bias arising from eligibility rules, develop algorithms that exploit greater parallelism to shorten convergence times, and refine device scheduling and compression to lower bandwidth and resource costs. The current design already supports generalization beyond machine learning to broader federated computation tasks.
Limitations include reliance on devices that meet strict eligibility criteria, potential under-representation of users without unmetered networks, and quadratic scaling costs that currently restrict Secure Aggregation to a few hundred participants per group. The reported operational metrics reflect one set of production workloads rather than controlled experiments, so results should be interpreted with caution when applied to new domains or device populations.
- Paper: Federated Learning: Strategies for Improving Communication Efficiency, Jakub Konečný et al. (2016). This foundational work establishes key strategies for improving communication efficiency in federated learning that directly inform the system design choices in the source paper.
- Paper: TensorFlow: A system for large-scale machine learning, Martín Abadi et al. (2016). Understanding TensorFlow's core system architecture is essential before reading about its application to large-scale federated learning infrastructure.
- Paper: Federated Learning: Challenges, Methods, and Future Directions, Tian Li et al. (2019). This survey paper broadens the architectural concepts introduced in the source into a comprehensive taxonomy of broader challenges and future research directions.
